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(54) Modeling of internet services 

(57) The dependancies of a computer service are 
modeled. The modeling hierarchically defines the rela- 
tionships between the computer service and the hard- 
ware and software services which the computer service 
depends. These relationships may be contained in data 
structures defining a directed acyclic graph. The model 
also defines which measurements need to be taken to 
determine health and performance of the computer 
service and the health and performance of all the com- 
puter services upon which the computer service 



depends. Software agents that take these measure- 
ments may be deployed using the model to determine 
the measurement locations and functions. Data from 
measurement agents may be propagated up the model 
hierarchy. The model (200) may also be visualized by a 
graphical interface to communicate the dependancies 
and the health and status of the services upon which 
the modeled service depends. 
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Finally, it would be desirable if such a system could configure itself automatically and deploy the tools and test elements 
necessary for problem detection, isolation, and resolution. 

SUMMARY OF THE INVENTION 

[0008] These and other needs are satisfied by the methods and apparatus of the present invention for modeling, dis- 
playing, and gathering information relating to computer services. Working from configuration information, a hierarchical 
model of a computer service is constructed. This model is an explicit model of a computer based service. The model 
defines the structure and dependencies of a service and its components, the measurements, baselines and thresholds, 
the health status, alarms, and control of the service components. The model enables: easier fault detection and isola- 
tion, auto deployment and configuration of the system, dissemination of expertise, root cause analysis, and visualiza- 
tion of the structure and dependencies of a service and its components. 

[0009] In one embodiment, this model may be represented as an acyclic graph. At the root of the model is the service 
itself. The next level is the servers that implement the service itself. Each of these servers is in turn are comprised of 
the server software, operating system, network interfaces, other services, etc. that support the implementation of that 
service. Further elements of the infrastructure are tied into the model at each level of the hierarchy. Finally, at the leaf 
nodes of this service model are the actual measurements that monitor fundamental aspects of the health and perform- 
ance of each of the infrastructure components represented higher up in the hierarchy. The hierarchical model estab- 
lishes how each service depends upon other services, software, hardware, and networks. A component of a service 
may have its own model. The model of this component may be instantiated in the model of the service. These models, 
and the functions they help acheive, may be implemented by data structures and programs running on one or more 
computer systems. 

[001 0] A representation of the hierarchical model provides an easy to understand method of viewing the complex rela- 
tionships of infrastructure elements and the measurements that indicate the health of each modeled infrastructure ele- 
ment. This representation may be displayed using a graphical user interface (GUI). Measurements, as well as an 
indication of the health of each infrastructure may be displayed on the representation of the model. 
[001 1 ] The hierarchical model also provides a template for automatically deploying software agents to take measure- 
ments of the fundamental aspects that affect the health and performance of the service. These measurements are 
propagated back up the hierarchical model to provide an indication of the overall health and performance of the service. 
Individual measurements may be detected and deemed abnormal as defined by deviations from baselines and/or 
threshold values. Abnormalities due to the cumulative effects of several dependant infrastructure elements may also be 
detected by propagating measurement information up the model hierarchy and then applying an arithmetic, or alterna- 
tively, a fuzzy-logic test. When abnormalities are detected, the model may also contain control definitions. These control 
definitions may define what actions to take to resolve the abnormality. 

[001 2] Problems with computer services may be diagnosed using the dependancies established by the hierarchical 
model by descending the hierarchy of the problem service. As the model is traversed from the problem service to lower 
levels of the hierarchy, it is examined for other services that are having problems. Healthy elements, and the services 
they depend on, are quickly eliminated. Root cause determination is facilitated by narrowing the search to only a few 
elements. This search may be conducted automatically, or with the aid of a GUI displaying a representation of the 
model, indications of the health of each infrastructure component, and measurement data. 

BRIEF DESCRIPTION OF THE DRAWINGS 

[0013] 

FIG. 1 is a schematic illustration of a representative CAR 

FIG. 2 is a schematic illustration of part of a hierarchical model of an E-mail service of FIG. 1 . 
DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS 

[0014] FIG. 1 shows a schematic illustration of a computer access provider (CAP). Users connect via the telephone 
network to one of the modems 112 that are connected to a modem server 110. Modem server 110 connects to at least 
one local area network 120. This network 120 allows communication between other computers (102, 104, 106, 108, 
128, and 114) within the CAP that are also connected to the network 120. The network is also connected, via some 
means, to the Internet 126. In this representative diagram, that connection is shown as being via a router 116, a 
CSU/DSU 1 1 8, and a leased line 1 24. 

[0015] Services may be provided by software running on computers (102, 104, 106, 108, 110, 128, and 114) con- 
nected to network 120. In FIG. 1 , E-mail is provided by processes running on computers 106 and 108. The CAP of FIG. 
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display. This graphical display could illustrate the dependancies of the infrastructure components by presenting a visual 
representation of the model much like FIG. 2. Measurement data could be illustrated as leaf nodes feeding infrastruc- 
ture components, or as bar graphs, dials, and other indicia inside the representations of individual infrastructure com- 
ponents. Problems, potential problems, and measurements that have exceeded thresholds could be emphasized on the 
display by flashing or changing the color of the representation of that service or measurement. 
[0023] To construct the hierarchical model, the information for that service must first be defined. One way to do this 
would be via a GUI where icons are used to represent services and lines, or links, can be drawn to establish depend- 
ancies. A simpler way would be to use a text file. In the case of a text file an entry for each service is created that assigns 
a name to the service, chooses the type of service from a group of predefined services, and then optionally specifies 
the components that this service is dependant upon and also optionally measurements to be taken that are indicative 
of the performance of that service, and parameters necessary lor those measurements. Entries that define measure- 
ments, how to take them, and the baselines and thresholds for that measurement that indicate a problem could also be 
included. These entries may define, or re-define templates and threshold values. A portion of a sample file is shown in 
table 1. 

[0024] Table 1 shows entries for the E-mail service, mail front-end processor #1 , and the computer system that runs 
mail front-end processor #1 . These services correspond to boxes 202, 204, and 228 in FIG. 2, respectively. Table 1 also 
contains and entry that could be used to override the default threshold for the measurement of CPU usage. 



Table 1. 



begin-service 




name 


= Marl -Service 


type 


= STServiceMail 


components 


= Mail-Front-End- 1, Mail-Front-End-2 


measurements 


= Mail- Response 


end-service 




begin-service 




name 


= Mail-Front-End-1 


type 


= STServiceMail 


components 


= Mail-Front-End-1 -Host 


measurements 


= Mail-Response( localhost, testmachine.com), 




Mail-Availability( testmachine.com ) 


end-service 




begin-service 




name 


= Mail-Front-End-1 -Host 


type 


= STHost 


measurements 


= CPU-Stats( mailhostl .hp.com ), 




MEM-Stats( mailhost1.hp.com) 


end-service 




begin-measurement 




name 


= CPU-Stats 


script 


= rsh $p1 load -percent j 


type 


= gauge 


unit 


= percent 


threshold 


= 150 


baseline 


= standard 
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